Claire Labry
4b0d346932
updating the alpine version
2021-12-17 10:41:04 -05:00
Claire Labry
1e9b621b00
testing out turining go modules false
2021-12-17 10:20:52 -05:00
Claire Labry
61eca6513b
enabling security scan for CRT
2021-12-16 11:49:22 -05:00
Matt Siegel
a38be58eaa
Merge pull request #11826 from hashicorp/proxycfg/valid-upstreams
...
[OSS] Handle discovery chain race
2021-12-14 10:14:00 -05:00
freddygv
bae0ccbe7f
Add changelog entry
2021-12-13 19:03:12 -07:00
freddygv
21f2c2e68d
Purge chain if it shouldn't be there
2021-12-13 18:56:44 -07:00
freddygv
fe85138453
additional test fixes
2021-12-13 18:56:44 -07:00
freddygv
d26b4860fd
Account for new upstreams constraint in tests
2021-12-13 18:56:28 -07:00
freddygv
2fe27b748d
Check ingress upstreams when gating chain watches
2021-12-13 18:56:28 -07:00
freddygv
6814e84459
Use ptr receiver in all Upstream methods
2021-12-13 18:56:14 -07:00
freddygv
6af9a0d8cf
Avoid storing chain without an upstream
2021-12-13 18:56:14 -07:00
freddygv
ba12dc215b
Clean up chains separately from their watches
2021-12-13 18:56:14 -07:00
freddygv
c5c290c503
Validate chains are associated with upstreams
...
Previously we could get into a state where discovery chain entries were
not cleaned up after the associated watch was cancelled. These changes
add handling for that case where stray chain references are encountered.
2021-12-13 18:56:13 -07:00
freddygv
70d6358426
Store intention upstreams in snapshot
2021-12-13 18:56:13 -07:00
R.B. Boyer
81ea8129d7
proxycfg: ensure all of the watches are canceled if they are cancelable ( #11824 )
2021-12-13 15:56:17 -06:00
Jared Kirschner
f81dd817ff
Merge pull request #11818 from hashicorp/improve-url-not-found-response
...
http: improve 404 Not Found response message
2021-12-13 16:08:50 -05:00
R.B. Boyer
4aabbe529c
proxycfg: use external addresses in tproxy when crossing partition boundaries ( #11823 )
2021-12-13 14:34:49 -06:00
Jared Kirschner
2de79abc00
http: improve 404 Not Found response message
...
When a URL path is not found, return a non-empty message with the 404 status
code to help the user understand what went wrong. If the URL path was not
prefixed with '/v1/', suggest that may be the cause of the problem (which is a
common mistake).
2021-12-13 11:03:25 -08:00
Freddy
85fe875d07
Use anonymousToken when querying by secret ID ( #11813 )
...
Co-authored-by: Chris S. Kim <ckim@hashicorp.com>
Co-authored-by: Dan Upton <daniel@floppy.co>
This query has been incorrectly querying by accessor ID since New ACLs
were added. However, the legacy token compat allowed this to continue to
work, since it made a fallback query for the anonymousToken ID.
PR #11184 removed this legacy token query, which means that the query by
accessor ID is now the only check for the anonymous token's existence.
This PR updates the GetBySecret call to use the secret ID of the token.
2021-12-13 10:56:09 -07:00
R.B. Boyer
631c649291
various partition related todos ( #11822 )
2021-12-13 11:43:33 -06:00
John Cowen
11ab84f840
ui: Add version information back into the footer ( #11803 )
2021-12-13 15:54:58 +00:00
John Cowen
2ba0e86d6d
ui: Disable setting wildcard partitions for intentions ( #11804 )
2021-12-13 15:42:10 +00:00
John Cowen
79b25901d7
ui: Change the URL prefix of partitions from `-` to `_` ( #11801 )
2021-12-13 15:39:56 +00:00
John Cowen
79679da840
ui: Fix a problem showing the default part in a non-primary ( #11800 )
...
When switching to a non-primary datacenter we should only show the word 'default' in place of the partition menu, this fixes up a bug preventing that from happening due to erroneous if/let nesting
2021-12-13 15:08:24 +00:00
John Cowen
b5c0b35ef7
ui: Prefer shorter partition word in certain places vs Admin Partition ( #11772 )
2021-12-13 15:04:35 +00:00
John Cowen
be23aab001
ui: Ensure we show a special readonly page for intentions ( #11767 )
2021-12-13 15:02:36 +00:00
John Cowen
e4d33187b9
ui: reuse BucketList for intention view pages ( #11765 )
2021-12-13 15:00:51 +00:00
Kyle Havlovitz
b50ef696c6
Merge pull request #11812 from hashicorp/metrics-ui-acls
...
oss: use wildcard partition in metrics proxy ui endpoint
2021-12-10 16:24:47 -08:00
Kyle Havlovitz
9dcaf0539c
Merge pull request #11798 from hashicorp/vip-goroutine-check
...
leader: move the virtual IP version check into a goroutine
2021-12-10 15:59:35 -08:00
Kyle Havlovitz
018693b6ee
acl: use wildcard partition in metrics proxy ui endpoint
2021-12-10 15:58:17 -08:00
Kyle Havlovitz
5fee1ff93e
Merge pull request #11809 from hashicorp/vip-counter-fix
...
state: fix freed VIP table id index
2021-12-10 15:06:27 -08:00
Kyle Havlovitz
80a4489844
state: fix freed VIP table id index
2021-12-10 14:41:45 -08:00
Kyle Havlovitz
ecbd3eb2a6
Exit before starting the vip check routine if possible
2021-12-10 14:30:50 -08:00
Chris S. Kim
8bdbe7c0fb
Update CI and release go versions to 1.17.5 ( #11799 )
2021-12-10 14:04:56 -05:00
Evan Culver
a0c754d44f
connect: update SNI label extraction to support new taxonomy for partitions ( #11786 )
2021-12-10 10:26:22 -08:00
John Cowen
4400d7c071
ui: Change partitions to expect `[]` from the API ( #11791 )
2021-12-10 14:41:08 +00:00
Freddy
0913644141
Update stray ref to old admin-partition cmd ( #11797 )
2021-12-09 19:10:01 -07:00
Kyle Havlovitz
04ef1c3fa0
leader: move the virtual IP version check into a goroutine
2021-12-09 17:00:33 -08:00
FFMMM
74eb257b1c
[sync ent] increase segment max limit to 4*64, make configurable ( #1424 ) ( #11795 )
...
* commit b6eb27563e747a78b7647d2b5da405e46364cc46
Author: FFMMM <FFMMM@users.noreply.github.com>
Date: Thu Dec 9 13:53:44 2021 -0800
increase segment max limit to 4*64, make configurable (#1424 )
Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>
* fix: rename ent changelog file
Signed-off-by: FFMMM <FFMMM@users.noreply.github.com>
2021-12-09 15:36:11 -08:00
R.B. Boyer
7b915456fd
update changelog for ent feature ( #11794 )
2021-12-09 16:44:14 -06:00
Matt Keeler
bcce800f55
Various Boltdb/Raft Documentation Updates ( #11793 )
...
* Documenting the new raft_boltdb configuration options
* Add documentation around new boltdb metrics.
* Correct documentation for the consul.raft.fsm.apply metric
2021-12-09 16:18:59 -05:00
haxandmat
d013ded88d
Improved performance of the version.GetHumanVersion function by 50% on memory allocation. ( #11507 )
...
Co-authored-by: Evan Culver <eculver@hashicorp.com>
2021-12-09 13:14:06 -08:00
Chris S. Kim
71bad67a4d
Add partitions to prettyformatters ( #11789 )
2021-12-09 15:58:45 -05:00
Daniel Nephin
f9647ece05
Merge pull request #11780 from hashicorp/dnephin/ca-test-vault-in-secondary
...
ca: improve test coverage for RenewIntermediate
2021-12-09 12:29:43 -05:00
Brandon Romano
f299488fa9
Update alert banner ( #11790 )
2021-12-09 12:09:47 -05:00
R.B. Boyer
bb75e63eb4
agent: ensure service maintenance checks for matching partitions ahead of other errors ( #11788 )
...
This matches behavior in most other agent api endpoints.
2021-12-09 10:05:02 -06:00
John Cowen
c410d295be
ui: Amends to Routing visualization for partitions ( #11747 )
...
* Update disco fixtures now we have partitions
* Add virtual-admin-6 fixture with partition 'redirects' and failovers
* Properly cope with extra partition segment for splitters and resolvers
* Make 'redirects' and failovers look/act consistently
* Fixup some unit tests
2021-12-09 10:47:58 +00:00
John Cowen
c434fefda2
ui: Fixup notifications for tokens using and topology intention saving ( #11763 )
2021-12-09 09:45:24 +00:00
John Cowen
340a0e03f5
ui: Make 'dangerous' buttons have white text even in dark theme ( #11756 )
2021-12-09 09:37:28 +00:00
Ashwin Venkatesh
b71fff9f1c
update docs ( #11784 )
2021-12-08 21:21:46 -05:00